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The invention relates to a method of processing image information. 

From European Patent Application No. 1 122728 it is known to transmit an 
encrypted video information stream and to store this information in encrypted form in a 
storage medium. Storage of the stream enables trick play such as for example fast forward 
playback, reverse playback etc. For trick play it suffices to access selected parts of the stored 
video information. 

To support trick play, management information is extracted from the video 
information stream. The management information contains pointers to certain locations in the 
video information that may have to be accessed during trick play. In the case of an MPEG 
stream for example, this involves pointers to the locations that contain I-firames (frames that 
are coded independent of other frames). The relevant locations are detected when the video 
information stream is received. In the case of an encrypted stream of information, however, 
detection of the relevant locations requires decryption of the stream. Thus, computational 
resources for decryption have to be occupied for storage of streams of video information. 
This reduces the availability of these resources for other purposes, for example for decryption 
during replay, and may ultimately require the inclusion of additional computational resources 
in a replay apparatus. In addition, a decryption key has to be available during storage. This 
may be undesirable, for example if another key is needed at that time for replaying 
information. 



Amongst others it is an object of the invention to reduce the amount of 
computational resources needed for supporting trick play of video information from a 
received and stored stream of video information. 

Amongst others, it is a further object of the invention to reduce the amount of 
computational resources without requiring additional information to be included in the stream 
of video information especially for the purpose of allowing trick play. 

Amongst others, it is another object of the invention to make it possible to 
prepare information that can be used for purposes such as trick play without need to decrypt. 
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The invention provides for a method according to claim 1 . According to the 
invention intermittent parts of the stream of video information are broadcast in unencrypted 
form. In particular, selectively those parts that are needed for determining pointers to 
locations that may be needed during trick play are preferably broadcast in unencrypted form. 
5 This makes it possible for a recording device to detect the content of these parts without 

decrypting the stream. Conventional properties of the stream are used to identify the relevant 
parts of the stream. No new matter need be added to the stream for this purpose. 

Preferably packets of broadcast information that contain the start of 
independently coded video frames (I-frames) are broadcast in unencrypted form. More 

10 preferably packets that contain a remainder of the I frames are broadcast in encrypted form. 
Thus, the broadcast stream cannot be used to extract an unencrypted "slide-show". Also, 
during trick play, the latency of replay can be reduced because, when replay jumps to a 
packet pointed at by a pointer, processing of that packet can start immediately, without 
waiting for decryption. Also preferably packets that contain the end of the I-frames are 

15 broadcast in unencrypted form. This makes it possible to detect the end of the I-frames 
without decrypting the stream. 



These and other advantageous aspects of the method, system and apparatus 
20 according to the invention will be described in more detail using the following figures 



Figure 1 shows a system for processing a video stream; 
Figure 2 illustrates a video stream; 
25 Figure 3 shows a replay unit 

Figure 1 shows a system for processing a video stream. The system contains a 
transmitter apparatus 10 and a receiver apparatus 12 coupled to each other. The coupling may 
30 be realized for example via a cable network or via wireless transmission. A plurality of 
receiver apparatuses 12 may be coupled in parallel to the transmitter apparatus 10. 
Transmitter apparatus 10 contains a video stream source 100 r an encryption unit 102 and a 
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Reception apparatus 12 contains a receiving unit 120, a storage device 122, a replay unit 126, 
a display device 128 and a detection unit 124. The receiving unit 120 has an input coupled to 
transmitter apparatus 10 and an output coupled to storage device 122. Replay unit 126 has an 
input coupled to storage device 122 and an output coupled to display device 128. Detection 
5 unit 124 has an input coupled to the output of receiving unit 120 and an output coupled to 
replay unit 126. 

In operation, source 100 produces a stream of unencrypted video data. The 
video data encodes a succession of video frames, encoded for example according to the 
MPEG standard. MPEG frames are encoded in a known way as I-frames, P-frames and B- 

10 frames. P-frames and B-frames are encoded as updates to other frames (ultimately as updates 
to I-frames, but also as updates to other P-frames or B-frames). Each I-frame is encoded 
independently, not as update to other frames. The frames are included in packets of 
information. Information that encodes a frame is usually distributed over a plurality of 
packets. Encryption unit 102 encrypts at least part of the packets of the stream of video data 

1 5 and passes the stream to transmission unit 1 06, which broadcasts the stream. The packets 
form the units of encryption, i.e. each packet is encrypted independently of other packets. 
Encryption unit 102 enters information into the packet to indicate whether the packet has 
been encrypted. 

Encryption controller 104 detects packets that contain the start of 
20 independently encoded frames in the stream produced by source 1 00, for example of I-frames 
in the case of MPEG encoding. These independently encoded frames will generally be 
referred to as I-frames in the following, but it will be understood that the invention applies to 
other types of stream them MPEG streams as well. Preferably, encryption controller 104 also 
detects packets that contain the ends of these I-frames. In response to detection encryption 
25 controller 104 controls whether encryption unit 102 encrypts the corresponding packet. A 
packet is not encrypted when it contains the start of an independently encoded frame. 
Otherwise all packets with video information are preferably encrypted, preferably except 
packets that contain the ends of independently encoded frames. 

Figure 2 illustrates a video information stream 20 produced by transmitter 
30 apparatus 10. The stream contains a succession of packets of information, shown separated 
from each other by partitions. Most of the packets in stream 20 contain encrypted 
information, but some of the packets 22, 24 contain unencrypted information, first packets 22 
containing starts of I-frames, second packets 24 containing ends of I-frames. It should be 
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appreciated that there is no fixed distance between successive starts of I frames, or between 
the starts and ends of these frames, because the video information is generally compressed. 



122. Detection unit 124 detects whether the received packets are encrypted or not. If a packet 
is not encrypted, detection unit 124 inspects whether the packet contains the start of an 
independently encoded frame. If s so, detection unit records information pointing at the packet 
in the stream. This may be in the form of an address of a memory location in storage device 
122 is stored, or in any other form that permits addressing of storage device 122 in order to 
retrieve the packet. Detection unit 124 may store the pointing information internally, but of 
course, as an alternative, the pointing information may be stored externally, for example in 
storage device 122. 



frame by testing for the picture header start code of MPEG frames for example. In MPEG the 
picture header start code is 00000100 (hexadecimal). Detection of encryption may be 
performed using the scrambling bits in the packets. In MPEG scrambling bit values 00 
indicate an unencrypted packet. It will be appreciated that in this way information that can be 
encoded in conventional MPEG streams to signal encryption, starts of frames etc. is now 
used to facilitate detection of the start and end of selected frames without decryption and 
without removing all access protection. That is, no additional bits have to be added to the 
stream to facilitate detection of the start and end of frames. In principle detection unit 124 
can perform detection whether the packet contains a start of an I-frame by parsing the 
information in the packet. Detection may even be made easier by indicating the start of I- 
frames when the transmitter apparatus 10 sets the Payload Unit Start Indicator bit of packets 
that contain the start of I-frames. In this case detection unit 124 does not even need to parse 
the packets to detect the start of I-frames. 

During replay, replay unit 126 retrieves the packets from storage device 122 
and decrypts the packets if necessary. The decrypted packets are supplied to display device 
128, which reconstructs the video information from the encoded packets and displays the 
reconstructed video information. Of course, the display device, or at least a display screen of 
the display device may also be externally attached to receiver apparatus 12. 

In trick mode replay, replay unit 1 26 selects a temporal pattern in which the 
encoded frames must be displayed, for example each time slipping a number of frames in a 



Receiver apparatus 12 receives the packets and stores them in storage device 



Detection unit 124 may perform detection of packets with starts and ends of 
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from detection unit 124 (or from wherever the pointing information has been stored). Replay 
unit 126 uses the retrieved pointing information to retrieve the frame selectively from storage 
device 122. 

Figure 3 shows an embodiment of replay unit 126. Replay unit 126 contains a 
5 frame selection unit 30, a decryption unit 32 and a multiplexer 34. Frame selection unit 30 
has a first interface 36 to detection unit 124 (not shown) for signalling required frames and 
receiving back pointing information. Frame selection unit 30 has an output coupled to a 
second interface 38 to storage device 122 (not shown) for outputting commands to retrieve 
packets starting from a storage location pointed at by the pointing information. A packet 

10 input of the second interface 38 is coupled to respective inputs of multiplexer 34, directly and 
via decryption unit 32. Multiplexer 34 is controlled by selection unit 30 and has an output 
coupled to the display device (not shown). 

In operation frame selection unit 30 selects the frames that will be displayed, 
as appropriate for the relevant trick mode. Frame selection unit 30 retrieves the pointer 

15 information to the starts and ends of these frames from the detection unit and commands the 
storage device to retrieve successive packets starting from the start of the frame and ending at 
the end of the frame. Multiplexer 34 supplies the retrieved packets to the display device, the 
packet that contains the start of the frame directly, subsequent packets via decryption unit 32. 
Because the packet that contains the start of the frame does not need to be decrypted this 

20 packet is supplied to the display device without the latency caused by decryption. For 

subsequent packets this latency is not critical since their retrieval is commanded sufficiently 
in advance to allow for decryption. 

Although the invention has been described for the case that the start and end of 
frames can be detected from information in individual packets, it will be understood that as 

25 an alternative the starts and/or ends may also be detected from information in pairs of 
successive packets. In this case, such pairs of successive packets are broadcast in 
unencrypted form, preferably dependent on whether an individual packet contains sufficient 
information to detect a start and/or end. Similarly, detection unit 124 uses information from 
such pairs if needed. 
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1 . A method of processing information that encodes a video stream of image 
frames, the video stream comprising mutually interspersed first and second subsets of the 
image frames, the method comprising 

- encrypting the information for the image frames of the first subset; 
5 - broadcasting a broadcast stream that contains, interspersed with one another, the 

information for the first subset in encrypted form and the information for the image frames of 
the second subset at least partly in plain form. 

2. A method according to claim 1, wherein selected parts of the second subset 
10 that enable access to the stream for the purpose of trick play are broadcast in unencrypted 

form. 

3 . A method according to claim 2, wherein the information encodes each 
particular frame of the second subset independent of the frames other than that particular 

15 frame. 

4. A method according to claim 3, wherein the broadcast stream contains 
packets, information from at least a particular frame being broadcast distributed over a 
plurality of the packets, the information being broadcast in unencrypted form in a first one of 

20 the plurality of the packets that contains a start of the particular frame, subsequent packets of 
the plurality containing at least part of a remainder of the information from the particular 
frame in encrypted form. 

5. A method according to claim 4, wherein the information from the particular 
25 frame is broadcast in unencrypted form in a final one of the plurality of the packets that 

contains information from the particular frame. 



6. A method according to Claim 2, the method comprising 

- storing the broadcast stream upon reception; 
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- detecting the unencrypted parts of the second subset that enable trick play; 

- generating and storing pointer information to the detected unencrypted parts; and 
subsequently 

~ selectively retrieving the packets during trick play, using said pointer information. 

5 

7. A reception and replay apparatus for receiving a broadcast stream that contains 
packets with information that encodes a stream of image frames partly in encrypted form, the 
apparatus comprising 

- a reception unit for receiving the packets; 

10 - storage unit for storing packets received by the reception unit; 

- a detection unit for detecting for each particular packet whether packet is in unencrypted 
form and storing a pointer to the particular packet conditional on detection that the particular 
packet is in unencrypted form; 

- a retrieval unit for controlling selective retrieval of the particular packet from the storage 
1 5 unit under control of the pointer. 

8. A reception and replay apparatus according to Claim 6, wherein the detection 
unit is arranged to process information from the packets that are received in unencrypted 
form to determine whether the packet contains a start or end of a frame and to store the 

20 pointer conditional on said determination. 



9. 



A transmitter apparatus arranged to perform the method of Claim 1 . 



PHNL020496EPP 



ABSTRACT: 



8 



11.06.2002 



Video information is transmitted encrypted as part of a video stream, so as to 



provide conditional access to the video information. The video stream comprising mutually 
interspersed first and second subsets of the image frames. The information for the image 
frames of the first subset is encrypted. A broadcast stream is broadcast that contains, 
5 interspersed with one another, the information for the first subset in encrypted form and the 
information for the image frames of the second subset at least partly in plain form. This 
permits receivers to detect the unencrypted parts without decryption and to generate and store 
pointer information to the unencrypted parts. The pointer information can be used later for 
the purpose of trick play at the receiver. 



10 
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FIG. 2 
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FIG. 3 



